Vulnerabilities > Linux > Medium

DATE CVE VULNERABILITY TITLE RISK
2023-03-27 CVE-2023-28866 Out-of-bounds Read vulnerability in Linux Kernel
In the Linux kernel through 6.2.8, net/bluetooth/hci_sync.c allows out-of-bounds access because amp_init1[] and amp_init2[] are supposed to have an intentionally invalid element, but do not.
network
low complexity
linux CWE-125
5.3
2023-03-24 CVE-2023-1583 NULL Pointer Dereference vulnerability in Linux Kernel
A NULL pointer dereference was found in io_file_bitmap_get in io_uring/filetable.c in the io_uring sub-component in the Linux Kernel.
local
low complexity
linux CWE-476
5.5
2023-03-24 CVE-2020-36691 Uncontrolled Recursion vulnerability in Linux Kernel
An issue was discovered in the Linux kernel before 5.8.
local
low complexity
linux CWE-674
5.5
2023-03-23 CVE-2023-0590 Use After Free vulnerability in Linux Kernel
A use-after-free flaw was found in qdisc_graft in net/sched/sch_api.c in the Linux Kernel due to a race problem.
local
high complexity
linux CWE-416
4.7
2023-03-23 CVE-2023-1249 Use After Free vulnerability in Linux Kernel
A use-after-free flaw was found in the Linux kernel’s core dump subsystem.
local
low complexity
linux CWE-416
5.5
2023-03-23 CVE-2023-28772 Classic Buffer Overflow vulnerability in Linux Kernel
An issue was discovered in the Linux kernel before 5.13.3.
local
low complexity
linux CWE-120
6.7
2023-03-06 CVE-2022-3707 Double Free vulnerability in multiple products
A double-free memory flaw was found in the Linux kernel.
local
low complexity
linux redhat CWE-415
5.5
2023-03-01 CVE-2023-23001 NULL Pointer Dereference vulnerability in Linux Kernel
In the Linux kernel before 5.16.3, drivers/scsi/ufs/ufs-mediatek.c misinterprets the regulator_get return value (expects it to be NULL in the error case, whereas it is actually an error pointer).
local
low complexity
linux CWE-476
5.5
2023-03-01 CVE-2023-23002 NULL Pointer Dereference vulnerability in Linux Kernel
In the Linux kernel before 5.16.3, drivers/bluetooth/hci_qca.c misinterprets the devm_gpiod_get_index_optional return value (expects it to be NULL in the error case, whereas it is actually an error pointer).
local
low complexity
linux CWE-476
5.5
2023-03-01 CVE-2023-23003 Unchecked Return Value vulnerability in Linux Kernel
In the Linux kernel before 5.16, tools/perf/util/expr.c lacks a check for the hashmap__new return value.
local
high complexity
linux CWE-252
4.0